Policy Summary
| Data Controller | Expatrict Limited |
|---|---|
| Trading Name | Oxyjyn (oxyjyn.com) |
| Contact Email | hello@oxyjyn.com |
| Governing Law | UK GDPR, PECR, Data (Use and Access) Act 2025 |
| Relevant ICO Guidance | Storage and Access Technologies Guidance (April 2026) |
1. What Are Cookies
Cookies are small text files stored on your device when you use a website or web app. They help services recognise your device across requests and visits.
In this policy, cookies include similar technologies such as local storage, session storage, pixels, and other storage/access tools where applicable.
2. Legal Framework
- Privacy and Electronic Communications Regulations (PECR)
- UK GDPR and Data Protection Act 2018
- Data (Use and Access) Act 2025 (including analytics exception)
- ICO Storage and Access Technologies Guidance (April 2026)
Under the DUAA 2025 analytics exception, consent is not required for qualifying aggregate analytics that do not profile individuals.
3. The Cookies We Use
| Type | Legal Basis | Examples | Purpose |
|---|---|---|---|
| Essential | Always on | Session, login state, security tokens, CSRF protection | Required for secure platform operation |
| Functional | Always on (service-requested functionality) | Language, notification, and accessibility preferences | Enable requested user settings |
| Analytics | DUAA 2025 analytics exception (aggregate only) | Aggregate page views, feature usage, error trends | Service improvement without individual profiling |
| Marketing | Consent required | Not currently in use | If introduced, explicit opt-in will be required |
3.1 Essential Cookies
- oxyjyn_session: Maintains authenticated session.
- oxyjyn_csrf: CSRF/security protection.
- oxyjyn_consent: Stores your cookie preferences.
3.2 Functional Cookies
- oxyjyn_prefs: Notification/display settings.
- oxyjyn_locale: Language/region choices.
3.3 Analytics Cookies
Used for aggregate operational insight such as load times, feature interaction rates, and reliability trends. No individual-level profiling is performed.
3.4 Marketing Cookies
Not currently used. Any future marketing cookies will be introduced only after clear notice and explicit opt-in consent.
4. Third-Party Cookies
We minimise third-party cookies and use processors under contractual safeguards where needed for service delivery (for example, technical infrastructure and operational messaging tools).
We do not use third-party advertising networks for behavioural ad tracking on Oxyjyn at this time.
5. How to Control Cookies
5.1 Cookie Settings
You can manage non-essential cookie choices via the platform's cookie settings controls. Essential cookies cannot be disabled because the service depends on them.
5.2 Browser Controls
You can also manage cookies in your browser settings for Chrome, Firefox, Safari, and Edge. Disabling essential cookies may prevent login and core features.
5.3 Analytics Opt-Out
Even where analytics is covered by the DUAA 2025 exception, you can opt out from account settings and your preference will be applied.
6. Cookie Retention Periods
- Session cookies: expire when browser closes.
- Persistent login cookie: up to 30 days when selected.
- Consent record: 12 months.
- Functional preference cookies: up to 12 months.
- Aggregate analytics: retained for limited operational windows before anonymisation.
7. Changes to This Policy
We review this policy at least annually and update it when legal requirements or cookie usage changes. Material changes are communicated on-platform.
8. Contact
Email: hello@oxyjyn.com
Website: oxyjyn.com/cookies
ICO: ico.org.uk | 0303 123 1113